Download BlackICE 3.6.cob

The developers of Internet Security Systems have released a new version of BlackICE with 3.6.cob as the version designation. This update is available in two flavors, namely BlackICE PC Protection and BlackICE Server Protection† The package is a versatile firewall with full intrusion detection. Both the incoming and outgoing network flows are checked and if there is a possible suspicion that something is wrong, the administrator is warned and the connection can be closed. The changelog includes the following list:

Security Content Updates in 3.6.cob:

• Added support for Microsoft decompression.
• Parser support added for UTF-16 Big Endian encoded pages.
• Added parser support for MIME types EMF and WMF.
• A false negative with MSRPC_Locator_Bo was removed.
• A false negative with User Defined Events URL_xxx contexts was removed.
• A false negative with HTTP_MSWord_Doc_Overflow was removed.
• A false positive with Email_Virus_Iloveyou was removed.
• A false positive with HTTP_Long_Header_Names was removed.
• A false positive with STUN_Message was removed.
• A false positive with HTTP_Field_With_Binary was removed.
• A false positive with SMB_Find_Files2_BO was removed.
• A false positive with EPolicy_Orchestrator_Format_String was removed.
• Support for malformed HSRP frames has been added.
• A Pam Internal Error resulting from a bug in the ARJ parser was corrected.
• Suspicious_ActiveX_Installer has been updated to detect additional spyware.
• The access reporting on blocked HTTP attacks has been corrected.

[break]The following two downloads are ready:
BlackICE PC Protection 3.6.cob
BlackICE Server Protection 3.6.cob